Rauthy
Rauthy is a single sign-on identity and access management server. It is an OpenID Connect and OAuth 2 provider with an admin UI, passkey (FIDO2/WebAuthn) and OTP multi-factor login, upstream login providers, SCIM, forward auth and PAM/SSH login.
Rauthy
In Development
This script is currently in active development and may be unstable or incomplete. Use in production environments is not recommended.
This script is currently in active development and may be unstable or incomplete. Use in production environments is not recommended.
Installation
Default install:
1
bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/DevScripts/main/ct/rauthy.sh)"
Default Credentials
| Username | Password |
|---|---|
admin@localhost | None |
Notes
Accept the self-signed certificate and sign in as admin@localhost with the password_plain value under [bootstrap] in /opt/rauthy_data/config.toml. Change it right away.
Passkeys need a domain, so admin MFA is off. For production, set pub_url, rp_id and rp_origin to your domain before anyone registers a passkey, then add the admin's passkey and set admin_force_mfa = true.
Back up /opt/rauthy_data/config.toml together with the database in /opt/rauthy_data/hiqlite. Without its encryption keys the database is unusable.